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Amended claims 

1. (Currently Amended) A system employed by a first application for 
supporting concurrent operation of a plurality of network compatible applications, 
comprising: 

an entitlement processor for authorizing user access to said first 
application in response to validation of user identification information; and 

a communication processor for initiating generation of, 

a session identifier particular to a user initiated session and for 
use by a plurality of concurrently operating applications to uniquely identify said user 
initiated session and 

an encryption key for use by said first application in encrypting 
personal record parameters conveyed in URL data, 

in response to validation of user identification 

information wherein 

said communication processor; communicates addfoonaj parameters to 
a m^afiinir^ap^lica^ addi1ional_parameters including one or more 

of. (a) an authentication service identifier, (b) a language identifier, (c) a URL to 
direct a browser to a starting application upon termination of a session. (d\ a URL for 
use in acquiring a web page providing a logon menu_to_support_ user initiation of 
another session, (e) a URL to be contacted upon a predetermined event and (f) an 
identification of a type of said predetermined event . 
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2. (Currently Amended) A system according to A system 

employed by a first application for supporting concurrent operation of a plurality of 
network compatible applications, comprising: 

an entitlement processor for authorizing user access to said first 
application in response to validation of user identification information; and 

a communication processor for initiating seneration of. 

a session identifier particular to a user initiated session and for 
use by a plurality of concurrently operating applications to uniqqqlv identify said user 
initiated session and 

an encryption key for use by said first application in encrypting 
personal record parameters conveyed in URL data, wherein said personal record 
parameters are being associated with a patient medical record and said encryption key 
is being particular to said user initiated session. 

in response to validation of user identification 

information 

3 (Previously presented) A system according to claim 2, wherein 
said encryption key is for common use by said plurality of concurrently 

operating applications in encrypting data associated with a personal record in data 

fields of a URL string* 

4. (Currently canceled) A system according to claim l t wherein 

said communication processor also communicates additional 
parameters to a managing application for storage, said additional parameters including 
one or more of, (a) an authentication service identifier (b) a language identifier, (c) a 
URL to direct a browser to a starting application upon termination of a session, (d) a 
URL for use in acquiring a web page providing a logon menu to support user 
initiation of another session, (e) a URL to be contacted upon a predetermined event 
and (f) an identification of a type of said predetermined event. 

5. (Original) A system according to claim 1, including 

an input processor for receiving said session identifier and an 
associated encryption key from said managing application. 

6. (Previously presented) A system according to claim 5, including 

an encryption processor for use in encrypting medical data associated 
with a patient medical record. 
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7, (Currently Amended) A system employed by a managing application 
for supporting concurrent operation of a plurality of network compatible applications, 
comprising: 

an input processor for receiving from a first application a session 
initiation request to initiate generation of a session identifier; 

a session identifier generator for generating a session identifier 
particular to a user initiated session and for use by a plurality of concurrently 
operating applications to uniquely identify said user initiated session; 

an encryption key generator for generating an encryption key for use by 
said first application in encrypting personal record parameters conveyed in URL data*, 
said encryption key generator randomly generating an encryption kev particular to 
said user initiate session, in response to said session initiation request, said 
encryption kev being for common use bv said plurality of concurrently operating 
a pplications in encrypting data associated with a personal record: and 

a communication processor for, 

communicating said session identifier to said first application 

and 

communicating said session identifier to another application of 
said plurality of concurrently operating applications in response to a request to receive 
said generated session identifier* 

8, (Currently canceled) A system according to claim 7„ wherein 

said encryption key generator randomly generates an encryption key 
particular to said user initiated session, in response to said session initiation request. 

9, (Currently canceled) A system according to claim 8, wherein 

said encryption key is for common use by said plurality of concurrently 
operating applications in encrypting data associated with a personal record. 
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10. (Previously presented) A system employed by a managing 
application for supporting concurrent operation of a plurality of network compatible 
applications, comprising: 

an input processor for receiving from a first application a session 
initiation request to initiate generation of a session identifier; 

a session identifier generator for generating a session identifier 
particular to a user initiated session and for use by a plurality of concurrently 
operating applications to uniquely identify said user initiated session; and 

a communication processor for, 

communicating said session identifier to said first application 

and 

communicating said session identifier to another application of 
said plurality of concurrently operating applications in response to a request to receive 
said generated session identifier wherein 

said communication processor includes said generated session 
i identifier in different types of command messages communicated to applications of 

said plurality of concurrently operating applications. 

11. (Currently Amended) A system supporting concurrent operation of 
a plurality of Internet compatible applications, comprising: 

a browser application providing a user interface display permitting user 
entry of identification information and commands for a plurality of Internet 
compatible applications and for providing user identification information to a first 
application for validation; and 

a managing application for generating, 

a session identifier particular to a user initiated session and 
an encryption key for use by said first application in encrypting 
personal record parameters conveyed in URL data, in response to receiving a session 
initiation request from a first application and for communicating said session 
identifier to said first applicatio n, said managing application randomly generating an 
encryption key particular to said user initiated session, said encryption key being for 
common use bv said plurality of concurrently operating applications in encrypting 
data associated with a personal record , 

12. (Previously presented) A system according to claim 1 1, wherein 
said encryption key is also to be used in encrypting and decrypting a 

session identifier conveyed in URL data. 
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13» (Currently canceled) A system according to claim 11, wherein said 
managing application includes 

said encryption key generator randomly generates an encryption key 
particular to said user initiated session, in response to said session initiation request 

14. (Currently canceled) A system according to claim 13, wherein 
said encryption key is for common use by said plurality of concurrently 

operating applications in encrypting data associated with a personal record. 

15. (Previously presented) A system supporting concurrent operation 
of a plurality of Internet compatible applications, comprising: 

a browser application providing a user interface display permitting user 
entry of identification information and commands for a plurality of Internet 
compatible applications and for providing user identification information to a first 
application for validation; and 

a managing application for-generating, 

a session identifier particular to a user initiated session in 
response to receiving a session initiation request from a first application and for 
communicating said session identifier to said first application wherein 

said managing application includes said generated session identifier in 
different types of command messages communicated to applications of said plurality 
of concurrently operating applications. 
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16. (Currently Amended) A method employed by a first application 
operating in a system supporting concurrent operation of a plurality of Internet 
compatible applications, said method comprising the activities of: 

authorizing user access to said first application in response to 
validation of user identification information; aad v 

initiating generation of, 

a session identifier particular to a user initiated session and 
an encryption key for use by said first application in encrypting 
personal record parameters conveyed in URL data, in response to validation of user 
identification information; and 

communicating parameters to a managing application for storage, said 
parameters including one or more of: (a) an authentication service identifier, (b) a 
language identifier, to a URL to direct a browser to a starting application unon 
termination of a session, (d) a URL_forjuse_in_acquiring a web page providing a logon 
menu to support user initiation of another session* fe) a URL to be contacted upon a 
pyed^tfiyinined event and, (f) aq identification, of 3 type of said p^et^n,fi4 qyqni;, 

17. (Currently Amended) A method employed by a managing 
application for supporting concurrent operation of a plurality of network compatible 
applications, comprising the activities of: 

receiving from a first application a session initiation request to initiate 
generation of a session identifier; 

generating a session identifier particular to a user initiated session and 
for use by a plurality of concurrently operating applications to uniquely identify said 
user initiated session; 

generating an encryption key for use by said first application in 
encrypting personal record parameters conveyed in URL dat a, said encryption key 
generator randomly generating an encryption key particular to said user initiated 
session, in response to said se^ion initiation request, said encryption key bejpR for 
common use bv said plurality of concurrently operating applications in_en_cryp_ting 
data associated with a personal record : and 

communicating said session identifier and said encryption key to said 
first application and to another application of said plurality of concurrently operating 
applications in response to a request to receive said generated session identifier. 

18. (Previously presented) A tangible storage medium incorporating 
machine readable instructions for performing the activities of claim 17, 
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19. (Currently Amended) A tangible storage medium incorporating 
machine readable instructions for performing the activities of claim 4& 16. 
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